Even psuedo code should not have obvious problems.

There are easily accessed databases of md5 and sha1 hashes of passwords to allow the dumped databased to be quickly scanned. Simply using a salt will be a huge improvement.